Finding: 1inch.network loads 3 scripts with NO integrity= (SRI) hash.
Any server-side compromise of 1inch.network (CDN poisoning, DNS hijack, server breach)
allows serving malicious JS that steals wallet keys from every visitor.
Fetching...
Fetching...